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Method and System for Tracing an Analog Copy of a Digital Work to a Unique 
Digital Copy and a Particular Digital Player 

Field of the Invention 

The present invention is directed to providing a capability for tracing analog 
copies of content (e.g. movies) committed to digital media, for example digital video 
disks (DVDs), for early-window markets (e.g. in-flight airline entertainment). 

Background of the Invention 

To be as economical as possible, applications for distributing digital works in 
niche markets should use media, playback equipment and display systems that are 
similar to mass-market versions produced for consumer or business applications. 
Typically, such digital works are subdivided into a multiplicity of data objects. 

Co-pending U.S. patent application number 09/519,253, filed on March 6, 2000 
in the name of Terence J. Nelson entitled "METHOD FOR RENDERING 
UNAUTHORIZED COPIES OF DIGITAL CONTENT TRACEABLE TO 
AUTHORIZED COPIES" which is incorporated herein by reference describes a 
method for creating digital works that may be traced to a particular individual. By 
this method, bits of license-enforcement data are embedded in a licensed copy of a 
digital work implicitly, by choosing one of a plurality of digitally distinct versions of 
each of a selected plurality of the data objects. These versions are advantageously 
prepared during the creation of a digital work so that each has the effect that the artist 
intended. The content, being customized, is delivered to a customer by means of a 
suitable writable media or by other methods that can be made secure. 

Another key step in the method of the co-pending application is to inform 
customers, in advance, that their copy of the digital work will be customized for 
them. This knowledge will substantially inhibit customers from making and giving 
away second-generation copies because the small benefit is not worth the risk of 
encountering the copyright holder's enforcement processes. 
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DVD- Video can also be used advantageously in niche markets where so-called 
"early window" material is screened. However, extra precautions are needed to 
ensure that high-quality analog copies are not illicitly made and distributed. In 
particular, it is useful to prepare modified players to play modified discs that do not 
5 produce acceptable output in unmodified DVD-Video players. This may be done, for 
example, by encoding the video data onto the DVD using an encryption code or an 
encryption method that is not supported by consumer-market players. This 
complicates the task of obtaining an analog copy because access to the modified 
players would normally be restricted. 

10 Operators of the early- window application, however, may be able to make 

analog copies without being detected. Therefore, it is also useful to be able to hold 
those persons with access to the DVD and the players, for example, flight attendants 
and mechanics, accountable for the discs and modified players entrusted to them. 
Accordingly, there is a need to provide a method of tracing analog copies of digital 

1 5 content delivered on writable media to the particular media and player responsible. 

Providing the ability to trace an analog copy to a player raises the issue of extra 
cost in implementing an encoding function in a player. Thus, it is advantageous if the 
inventive system relies on an existing feature of DVD-Video to support this capability. 

Summary of the Invention 

20 The present invention is embodied in a method for protecting content delivered 

on writable media to modified players each having an analog output. 

The present invention is embodied in apparatus and a method for producing a 
traceable analog copy of an original digital work. The digital work includes a 
plurality of distinct portions. Each portion may be, for example, a scene or a group 
25 of pictures. The original work is made to include multiple parallel versions of at least 
selected portions of the work. These portions are arranged hierarchically. At the top 
of the hierarchy is the set of objects. Each object in a set is a digital representation of 
a portion of the work, and at least one alternate set is available for each portion. Each 
of the objects in the set of objects is digitally distinct and each member of each object 
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is distinct in a way that can be perceived in the analog form of the member. Each 
version of each parallel portion is advantageously prepared during the creation of the 
digital work so that it has the effect that the artist intended. 

The selected sets of data objects are written to a writable medium, with the 
selection encoding identifying information into the particular digital copy. This 
identifying information may further be stored in a digital identifier, which may then 
be used to identify the agent responsible for that particular copy. 

When the work is played from the medium, a modified player plays respective 
selected members for each set of selected objects that include more than one member. 
The selection of the members encodes information identifying the player on which the 
work is being reproduced. Because each parallel member of an object is distinct in 
the analog signals that it produces, the identity of the player can be determined from 
characteristics of the sequence of portions in the analog work. 

According to one aspect of the invention, the work is a DVD-video title, the 
objects are respective scenes of the video title and the members of a data object are 
respective DVD camera angles of the scene. 

Another aspect of the invention is a method for tracing an analog copy of a 
digital work to the particular copy of the original digital work from which the analog 
copy was produced. The particular segments of the analog copy are compared to a 
plurality of members of data objects from said original digital work to determine 
which members of which data objects were present on said particular copy. This 
identification recovers bits of a copy tracking ID that was embedded in said unique 
copy. This ID provides copy tracking information directly, or optionally points to 
such information in a copy-tracking database maintained by the content provider. 

Brief Description of the Drawings 

The organization and operation of this invention will be understood from a 
consideration of detailed descriptions of illustrative embodiments, which follow, when 
taken in conjunction with the accompanying drawings. 
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Fig. 1 is a flow-chart diagram that illustrates steps that a content provider can 
follow to customize an authorized copy of a digital work on writable 
media so that subsequent unauthorized copies are traceable to an agent 
who is responsible for the copy. 

5 Fig. 2 is a data structure diagram that illustrates a record in a content database 
containing distinct alternate sets and subsets of data for each digital work 
in the database. 



Fig. 3 is a data structure diagram that illustrates choices made between distinct 
sets of data for each data object of a traceable copy of a digital work. 

10 Fig. 4 is a block diagram of a player modified to encode its ID in the analog 
output signal when an interleaved stream of video objects is read. 

Fig. 5 is a data structure diagram that illustrates an equipment-tracking database 
that may be used to identify each playback unit and its custodian, and 
other information for authenticating the player ID. 

15 Fig. 6 is a flow-chart diagram that illustrates steps that a modified player may 
take to encode its identifying data into the analog video at its output. 

Fig. 7 is a data structure diagram that illustrates choices made by a modified 
player between distinct versions of certain data objects of a traceable 
copy of a digital work for playback to an analog output. 



20 



Detailed Description of the Invention 

In an exemplary embodiment, the writable medium is a DVD disc and the 
content is a DVD movie. The exemplary players are used in the early-window 
applications, such as airline movies, and are modified to play the content, which, in 
turn, is modified so that it will not play acceptably in consumer-market DVD players. 
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Although the invention is described in the context of a DVD it is contemplated that it 
may be practiced with any digital work that is widely distributed, such as a computer 
game or other digital work that is ultimately expressed in analog form. 

In an exemplary embodiment, the content is a particular copy of an original 
5 digital work written on the media as sequential distinct segments. The distinct 
segments are advantageously prepared during the composition of the digital work to 
ensure that they have the effect intended by the artist but nevertheless produce distinct 
analog outputs in a player. This may be done, for example, by using the camera 
angle feature of the DVD encoding scheme. This feature allows each segment, for 

10 example, a scene or a group of pictures, to be recorded on the disk, in parallel, from 
as many as nine different camera angles. In the exemplary embodiment of the 
invention, it is contemplated that the multiple segments may be versions of the same 
scene, each shifted by a few pixel positions relative to a reference scene. This would 
make the differences among the scenes imperceptible to a viewer but each scene 

15 would be sufficiently different to produce respectively different analog signals. When 
the work to be protected is a video game, the segments may be specific graphics that 
are displayed during the game or visually distinct versions of specific graphics. 

The versions of the segments are arranged hierarchically in groups of two or 
more. The top of the hierarchy for a particular segment is a set of data objects. An 
2 0 exemplary set of data objects includes two or more individual data objects. A 
particular digital copy includes one set chosen from two or more alternate sets for 
each segment. A particular analog copy made from the digital copy includes one 
member from each set of objects on the digital copy. Each of these sets includes at 
least one member, and selected sets include multiple members. 

2 5 The sets of data objects of each digital work are kept in a content database for 

use in copyright enforcement as well as for preparation of traceable copies. As 
described in the above-referenced patent application, by selecting from among 
multiple parallel objects in each of a group of sets, a particular copy of the digital 
work implicitly contains the identity of the agent who is to be responsible for that 

30 copy. In the exemplary embodiment of the invention, successive bits of an identifier 
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that is unique to the agent are encoded as binary choices between successive first or 
second artistically equivalent but distinct sets of data objects. 

As set forth above, each such data object may contain one member or more 
than one member. Thus, the selected data objects that encode the identity of the agent 
5 may each have one member or two or more members. The identity of the player is 
encoded by selecting a specific member from each of a selected number of data 
objects that include two or more members. The ultimate analog output signal uses 
only one member from each data object on the digital copy. 

It is the modified player that chooses which member from each of the selected 

10 data objects in the digital copy to reproduce, in order to encode the identity of the 

player into the analog signal. In the exemplary embodiment of the invention, in which 
the content to be protected is a DVD-Video disc, the two members of each selected 
data object correspond to different camera angles of a respective scene. To aid in also 
determining the identity of the agent responsible for the DVD from the analog copy, 

15 where sets include parallel objects, each object of each such set may include members 
that are distinct, in their analog form, from all other analog members in the set of 
objects. Thus both the selection of the data object and the selection of the members 
from within the data object may be deteraiined by analyzing the analog copy. As 
described above, the result is at least two versions of the scene with: 1) different 

20 views of the action, if truly different camera angles are used, or 2) no perceptible (to 
the viewer) difference in the action, but a measurable difference in the analog signal if 
the different members of each set are, for example, merely shifted relative to one 
another by a few pixel positions. A more thorough description of the camera angle 
feature of DVD video may be found in Jim Taylor's book DVD Demystified, 

25 McGraw-Hill, New York (1997) p. 173. 

A modified player chooses between the members of the selected data objects 
using a signed digital identifier (digital ID) that is stored in a read-only memory 
(ROM) that is integral to the player. In the exemplary embodiment of the invention, 
this signed digital ID is encoded at the analog output of the player as a binary choice 
30 between the first and second members of the selected data objects that have two 
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members. Other embodiments may have a digital ID allowing selection from more 
than two members of the selected data objects that have a plurality of members. 

In the exemplary embodiment of the invention, the signed digital ID of a player 
is constructed by encoding a unique digital ID of the player using a public-key 
5 algorithm. In the exemplary embodiment, the digital ID is encrypted using a private 
key, known only to the copyright holder or its designated agent. The result is the 
signed digital ID which is stored into the ROM. A private key is used so that it is 
difficult to forge the signed digital ID. In an exemplary embodiment of the invention, 
the public key, the identity of the player and the names of all custodians who are 
1 0 responsible for the player are kept in an equipment-tracking database belonging to the 
copyright holder or to a person or company designated by the copyright holder to 
enforce the copyright. 

When an unauthorized analog copy is found by the copyright holder, he or she 
compares the copy with the distinct analog output of the data objects available in the 

15 content database. This comparison is thereby able to determine which of the distinct 
members of which of the data objects were recorded. From this information, a 
particular digital player can be identified. The tracking database is then searched for 
this digital player identifier to identify the player from which the unauthorized analog 
copy was made. Therefore the copyright holder can read the signed digital ID of the 

2 0 player and retrieve information about the custodian of the player from the equipment- 
tracking database. In addition, if each of the members of each data object that was 
available to encode the identity of the agent also produce distinct analog outputs, a 
digital agent identifier can be generated from the analog copy. This digital agent 
identifier can be sufficient by itself or alternatively may be used to locate a record in a 

25 copy-tracking database to identify the agent who was responsible for the digital copy 
from which the unauthorized analog copy was made. 

Thus the agent responsible for the digital copy that was used to make an 
unauthorized analog copy and the custodian of the digital player in which the analog 
copy was made can both be identified. The agents and custodians are made aware of 
30 this traceability of unauthorized analog copies when they are provided with the DVD 
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and the player. This knowledge substantially inhibits them violating the trust placed 
in them. 

Fig. 1 shows steps comprising a method (10) for preparing a unique copy Wa 
of a digital work W for an agent A. In an exemplary embodiment of the invention, W 
5 is a DVD-Video movie. At step 1 1 , a copy-tracking identifier CE(A,W) (1 1') is 
generated. This identifier fully identifies the agent A and associates him or her with 
the unique digital copy Wa- As with the digital ID of the player, described above, 
the identifier 11' may be a signed data object, that is to say, an identifier that is 
encrypted using a private key. 

10 At step 12 of method 10, an index s is initialized and then used at step 13 to 

access the s-th bit of the copy-tracking identifier CE(A,W) (11'). If CE S (A,W) is 
zero, the method branches to step 14; otherwise, the method branches to step 14'. At 
either step, a set of data objects is retrieved from a content database (20) shown in 
Fig. 2. A typical record (21) in this content database also contains a field identifying 

15 the digital work W (22) and the number N (23) of data objects in W. Two sets of data 
objects S(s) (25) and S'(s) (26) are associated with at least selected values of the index 
s (24). Although the exemplary method 10 selects from sets containing pairs of data 
objects, it is contemplated that a greater number of alternative sets may exist and the 
identifier may be a trinary, quatranary or other n-ary value that is encoded by the 

2 0 appropriate selection of a single data object from the group of alternative data objects. 

Also in the exemplary embodiment selected data objects may have only one 
member or it may have two or more members. When a data object has two members, 
such as L(S(s)) (25L) and R(S(s)) (25R), they are video objects of equal length as 
provided for by the multi-angle feature of DVD-Video, and selection during playback 

25 is possible. When a data object has only one member, it is referred to, in the 

exemplary embodiment, as L(W(s)) or L(W'(s)). Although the exemplary method 10 
selects from data objects containing pairs of members, it is contemplated that a greater 
number of alternative members may exist and the identifier may be a trinary, 
quatranary or other n-ary value that is encoded by the appropriate selection of a single 

3 0 member from the group of alternative members. 
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The member or members of each data object are advantageously defined during 
the creation of the digital work. At that time, the artist creating the work can ensure 
that each member creates the effect intended and is nevertheless distinguishable, even 
in copies made at the analog output of a player. Moreover, the data objects may be 
5 modified, for example, by using a proprietary encryption key or encryption method, 
to produce acceptable playback only in the modified DVD-Video players. 

Returning again to Fig. 1, if the s-th bit of the copy-tracking identifier 
CE(A,W) (11*) is zero, the method branches to step 14 and Wa(s) is set equal to S(s) 
(25). Otherwise, the method branches to step 14' and Wa(s) is set equal to S'(s) 

10 (26), which, as described above, is distinct from S(s). After step 14 or 14', method 10 
proceeds to step 15, where the current value of s is examined. If s equals N-l, the 
customized work Wa is completely defined. If not, s is incremented at step 15' and 
the process continues from step 13, as described above. After the last data object is 
assigned, the process terminates at step 16. At step 16, Wa is committed to a 

15 writable disk and delivered to the agent A. 

Fig. 3 summarizes the effect of method 10 for preparing a unique copy Wa 
(35) of a digital work W (22) for an agent A. The copy-tracking identifier CE(A, W) 
(11 32) is given in the second column next to the column of data-set numbers (3 1) . 
Depending on the value of the bit CE S (A,W), a data object is accepted from the first 
20 column of data objects S(s) (25, 33) or the second column S'(s) (26, 34), each of 
which may itself include multiple members, into the customized digital work Wa(s) 
(35). Although, in the exemplary embodiment of the invention, selected data objects 
S(s) or S'(s) each has only two members, it is contemplated that each such object may 
have three or more members. 

25 Fig. 4 is a simplified block diagram of a modified DVD player (40) that has a 

modified playback-control block (42) and a modified decoder (45). The modified 
playback control block accepts data objects from a disc reader (41) and a signed 
player ID data object PE (49) from an internal read-only memory (43). The read-only 
memory also provides a number M (48) equal to the number of bits in PE. 
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Fig. 5 is a description of the equipment-tracking database (50) used to track 
modified DVD players (40). Each exemplary database record stores a digital ID (52) 
for the player, previously signed with a private key; the digital signature algorithm 
(53) used for that player; and the public key (54) needed to authenticate a signed 
5 digital ID. Each database record also stores one or more IDs (55) for the custodian(s) 
of the player. When an unauthorized analog copy has been found and the ID (52) of 
the player used to produce the unauthorized analog copy has been determined, the 
ID(s) (55) of the custodian(s) of that player can readily be determined, so those 
persons can be held accountable. 

10 Returning to Fig. 4, notice that the modified DVD player also has a digital 

output port (47). Using this port, the custodian can read the signed digital ID PE 
(49). The custodian is also able to read the player ID (52), public key (54) and choice 
of digital signature algorithm (53) from the equipment-tracking database. Custodians 
can, therefore, use the digital signature algorithm to determine if the signed player ID 

15 PE (49) is authentic. This may be done, for example, by decoding the signed digital 
ID and comparing it to an identifier that is printed on the outside of the player. 
Custodians are required to remove a player from service when its player ID becomes 
unauthentic. This change may occur, for example, as a result of a malfunction. A 
change of this type alerts the custodian that someone may have tampered with the 

20 player and its continued use may compromise the security of digital content played in 
it. 

In Fig. 4, the modified player-control block (42) receives successive data 
objects Wa(s) (35) from the disc reader (41). The modified player-control block 
uses successive bits of the signed player ID PE (49), as needed, to decide which 

25 member of each data object to transfer to the modified decoder (45). This selection 
process determines which member of a data object, for example, L(S(s)) (25L), is 
selected to be converted to an analog signal. The modified playback control unit uses 
the selected member to define a temporary video pre-output V (44'). The modified 
playback control block then causes the modified decoder to provide V (44') to an 

30 analog output terminal (46). In one exemplary embodiment of the invention, V (44') 
and the decoder may be selected and configured on the DVD so that an acceptable 
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analog output is obtained from the modified player but only unacceptable output is 
obtained from an un-modified DVD-Video player. 

Fig. 6 shows a method (60) used by an exemplary modified player (40) to 
encode its signed ID PE (49) in the player's analog output signal (46). The method 
5 begins when a disc is inserted in the disc reader (41) of the player. At step 61 , the set 
number s is initialized to 0. At step 62 a bit position index t in PE is also set to 0. At 
step 63, the data object Wa(s) is examined to see if it has 1 or 2 members. If Wa(s) 
has only one member, the method branches to 63' where the single member is used to 
define the temporary video pre-output V (44'). After step 63', the method branches to 
10 step 67, where V (44') is played to the analog output (46). 

If, at step 63, the data object W^(s) has two members, control transfers to step 
64 where the t-th bit of the signed player ID PE (48) is examined. If PE(t) is zero, 
the method branches to step 65 where the temporary pre-output V (44') is set equal to 
L(Wa(s)). Otherwise, the method branches to step 65', where V (44') is set equal to 
15 R(Wa(s)). After step 65 or 65', the method proceeds to step 66 where the bit 
position t is incremented. The method then continues to step 67, where V (44') is 
decoded and played to the analog output (46). 

After step 67, the method proceeds to step 68, where a test is made to see if all 
the data objects on the disc have been used. If there are more data objects, the 
20 method branches to step 68', where s is incremented. After step 68', the method 
proceeds to step 69, where t is tested. If t has been incremented to M (48) of the 
signed digital ID stored in the read-only memory (43), then the method continues 
from step 62 again, where t will be reset to zero. If, at step 69, t is less than M (48), 
the method continues from step 63 again. 

25 Fig. 7 summarizes the effect of method 60 for encoding the signed player ID 

PE (49, 72) in the signal at its analog output (46). The signed player ID PE (49) is 
given in the second column (72) next to the column of data-object numbers (71). 
Depending on the value of the s-th bit of the copy-tracking identifier CE(A,W) (11'), 
a data object is accepted from first column of data objects S(s) (25, 33) or the second 

30 column S'(s) (26, 34) into the customized digital work Wa(s) (35). 
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When the holder of the copyright of a digital work W (22) discovers an 
unauthorized analog copy, he or she can compare the copy with the output that results 
from each member (25L, 25R, 26L, 26R) of both data objects (25, 26) at each data- 
object number s (24) in the content-tracking database (20). In the exemplary 
embodiment of the invention, the copy-tracking identifier CE(A,W) (IT) is recovered 
from the sets of data objects that match, and the signed player ID PE (49) is recovered 
from the members in each data object that match the unauthorized analog copy. By 
reference to the content-tracking data object, the responsible agent A is identified, and 
by reference to the equipment-tracking database, the responsible custodian is 
identified. The owner may then take appropriate enforcement actions based on the 
identification of the agent A and the custodian (55) of the player (40). 

While the invention has been described by reference to specific embodiments, 
this was for purposes of illustration only. Numerous alternative embodiments will be 
apparent to those skilled in the art and are considered to be within the scope of the 
invention. 



